Kill Chain & Diamond Model Analysis

Map a threat actor or campaign across the Cyber Kill Chain and Diamond Model of Intrusion.

Saved analyses

Gitloker (threat actor)

Risk

Medium

0 techniques 40 tools/malware 0 vulnerabilities 15 IOCs 0/7 stages covered

1 Reconnaissance

No data

›

2 Weaponization

No data

›

3 Delivery

No data

›

4 Exploitation

No data

›

5 Installation

No data

›

6 Command & Control

No data

›

7 Actions on Objectives

No data

Stage risk: Critical High Medium None

Tools & Malware (40)

AsyncRAT BLACKCOFFEE BeaverTail BunnyLoader ClickFix Dark Enfal Expand Exploit code Ghost RAT GitHub Global Gorilla IcedID InvisibleFerret Kevin Leverage Lynx Malware Matryoshka Mimikatz Phishing campaigns Phishing emails PittyTiger Polyglot RedLine RedLine Stealer Rogue STOP SUNBURST Sednit Snake Sofacy Stargazers Ghost Network TEARDROP Telegram Trojan WhatsApp malware distribution phishing

Indicators of Compromise (15)

Domain

breaches.Advertisement cisa.gov binding.gyp README.md demo-cloud.space README.me pitfalls.Follow githubtalentcommunity.online +6 more

Email Address

notifications@github.com

ATT&CK Tactic Coverage

Reconnaissance Resource Development Initial Access Execution Persistence Privilege Escalation Defense Evasion Credential Access Discovery Lateral Movement Collection Command & Control Exfiltration Impact

Diamond Model of Intrusion

Adversary · Capability · Infrastructure · Victim

Completeness

4/4

Adversary

Confidence

60%

Gitloker

Type: Unknown Active

APT28 Pawn Storm Fancy Bear Sednit hacktivists +3 more

Infrastructure 14 IOC(s)

50%

Domain

breaches.Advertisement cisa.gov binding.gyp README.md demo-cloud.space +9

Artifacts (1)

notifications@github.com

Capability

50%

40 tool(s)/malware

AsyncRAT BLACKCOFFEE BeaverTail BunnyLoader ClickFix Dark Enfal Expand +32

Victim

70%

Targeted Sectors

manufacturing healthcare transportation government media energy information-technology maritime gaming defense

Targeted Countries

US RU IN BR GB

Diamond Model Meta-Features

Result

Active

Direction

Adversary → Infrastructure → Victim

Methodology

Unknown

Adversary → Capability

Adversary → Infrastructure

Capability → Victim

Infrastructure → Victim

Diamond Model edges